Lucene search
+L

1116 matches found

HackRead
HackRead
•added 2026/01/23 12:29 p.m.•17 views

ShinyHunters Leak Alleged Data of Millions From SoundCloud, Crunchbase and Betterment

ShinyHunters claim more data breaches and leaks are coming soon!...

5.4AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/01/14 3:05 p.m.•47 views

CVE-2025-71109 MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits

In the Linux kernel, the following vulnerability has been resolved: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits Since commit e424054000878 "MIPS: Tracing: Reduce the overhead of dynamic Function Tracer", the macro UASMiLAmostly has been used, and this macro can...

7.1CVSS0.0021EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 8:35 a.m.•21 views

CVE-2020-10921

This vulnerability allows remote attackers to issue commands on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lac...

9.8CVSS8.1AI score0.02808EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:35 a.m.•34 views

CVE-2020-10922

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issu...

7.5CVSS7.2AI score0.03674EPSS
SaveExploits0References1
Fedora
Fedora
•added 2026/01/04 1:03 a.m.•20 views

[SECURITY] Fedora 42 Update: nginx-mod-headers-more-0.39-4.fc42

This module allows adding, setting, or clearing specified input/output header s. This is an enhanced version of the standard headers module because it provides more utilities like resetting or clearing "builtin headers" like Content-Type, Content-Length, and Server...

6.3CVSS5.7AI score0.00413EPSS
SaveExploits0
Fedora
Fedora
•added 2026/01/03 12:42 a.m.•22 views

[SECURITY] Fedora 43 Update: nginx-mod-headers-more-0.39-4.fc43

This module allows adding, setting, or clearing specified input/output header s. This is an enhanced version of the standard headers module because it provides more utilities like resetting or clearing "builtin headers" like Content-Type, Content-Length, and Server...

6.3CVSS5.7AI score0.00413EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/01 6:25 a.m.•37 views

CVE-2025-14434

The Ultimate Post Kit Addons for Elementor WordPress plugin before 4.0.16 exposes multiple AJAX “load more” endpoints such as upkalexgridloadmoreposts without ensuring that posts to be displayed are published authentication. This allows an unauthenticated attacker to query arbitrary posts and...

5.3CVSS6.9AI score0.00281EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/31 6:30 a.m.•19 views

EUVD-2025-205885

The Ultimate Post Kit Addons for Elementor WordPress plugin before 4.0.16 exposes multiple AJAX “load more” endpoints such as upkalexgridloadmoreposts without ensuring that posts to be displayed are published authentication. This allows an unauthenticated attacker to query arbitrary posts and...

6.4AI score0.00281EPSS
SaveExploits0References3
NVD
NVD
•added 2025/12/31 6:15 a.m.•24 views

CVE-2025-14434

The Ultimate Post Kit Addons for Elementor WordPress plugin before 4.0.16 exposes multiple AJAX “load more” endpoints such as upkalexgridloadmoreposts without ensuring that posts to be displayed are published authentication. This allows an unauthenticated attacker to query arbitrary posts and...

5.3CVSS0.00281EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/31 6:00 a.m.•12 views

CVE-2025-14434 Ultimate Post Kit < 4.0.16 – Unauthenticated Arbitrary Post Content Disclosure

The Ultimate Post Kit Addons for Elementor WordPress plugin before 4.0.16 exposes multiple AJAX “load more” endpoints such as upkalexgridloadmoreposts without ensuring that posts to be displayed are published authentication. This allows an unauthenticated attacker to query arbitrary posts and...

6AI score0.00281EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 6:00 a.m.•42 views

CVE-2025-14434

The Ultimate Post Kit Addons for Elementor WordPress plugin before 4.0.16 exposes multiple AJAX “load more” endpoints such as upkalexgridloadmoreposts without ensuring that posts to be displayed are published authentication. This allows an unauthenticated attacker to query arbitrary posts and...

5.3CVSS6AI score0.00281EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•25 views

PT-2025-54283

The Ultimate Post Kit Addons for Elementor WordPress plugin before 4.0.16 exposes multiple AJAX “load more” endpoints such as upk alex grid loadmore posts without ensuring that posts to be displayed are published authentication. This allows an unauthenticated attacker to query arbitrary posts and...

6.9AI score0.00281EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/12/31 12:00 a.m.•26 views

WordPress Ajax Load More plugin < 2.8.1.2 - Subscriber+ File Upload & Deletion vulnerability

Subscriber+ File Upload & Deletion vulnerability discovered by PizzaHatHacker in WordPress Plugin Ajax Load More versions 2.8.1.2...

8.8CVSS5.5AI score0.01576EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•6 views

CVE-2025-14434: Undefined Security Weakness

The Ultimate Post Kit Addons for Elementor WordPress plugin before 4.0.16 exposes multiple AJAX “load more” endpoints such as upkalexgridloadmoreposts without ensuring that posts to be displayed are published authentication. This allows an unauthenticated attacker to query arbitrary posts and...

5.3CVSS6AI score0.00281EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•5 views

CVE-2025-12976: Improper Neutralization of Input During Web Page Generation

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'eventslistgrouped' shortcode in all versions up to, and including, 7.2.2.1 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS6.1AI score0.00424EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/17 10:02 a.m.•15 views

CVE-2025-64247

Missing Authorization vulnerability in edmon.parker Read More & Accordion expand-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Read More & Accordion: from n/a through = 3.5.5.1...

4.3CVSS5.9AI score0.0022EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/17 12:00 a.m.•5 views

CVE-2025-13880: Missing Authorization

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets Google Reviews, YouTube Feed, Photo Feeds, and More plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the getAdvanceSettings and saveAdvanceSettings...

6.5CVSS5.8AI score0.00252EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/16 9:31 a.m.•19 views

EUVD-2025-203603

Missing Authorization vulnerability in edmon.parker Read More & Accordion expand-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Read More & Accordion: from n/a through = 3.5.4.1...

6.4AI score0.0022EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/16 9:15 a.m.•20 views

CVE-2025-64247

Missing Authorization vulnerability in edmon.parker Read More & Accordion expand-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Read More & Accordion: from n/a through = 3.5.5.1...

4.3CVSS0.0022EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/16 8:12 a.m.•4 views

CVE-2025-64247 WordPress Read More & Accordion plugin <= 3.5.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in edmon.parker Read More & Accordion expand-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Read More & Accordion: from n/a through = 3.5.5.1...

4.3CVSS6AI score0.0022EPSS
SaveExploits0References1
Rows per page
Query Builder